Network manager related questions
by grepo from LinuxQuestions.org on (#6DRF8)
Hello,
I just migrated an old school configuration located in /etc/sysconfig/network-scripts to /etc/NetworkManager/system-connections on my Fedora 38 systems. I am confused of several things.
1. On a server when I run nmcli devices, I can see apart from others:
ppp0 ppp disconnected --
eno1 ethernet unavailable --
enp72xxx ethernet connected --
ppp0 is surely connected and working havin g ip address and communicating. Why is it reported as disconnected?
eno1 and enp72xxx were not configured in the old system why are they displayed as I can see? The enp72xxx interface is probably some ipmi related and having ip addres 169.254.3.1, eno1 is not having an ip address, it is not used.
2. How can I be sure any user is not able to shutdown any interface on the server by any means? When I use nmcli as a user, I correctly get I am unauthorized, but regarding same actions on the client I can see I am not able to shutdown an interface using nmcli, but I am able to shut it down using gdm. Best if I can disable this also on a client for a particular interface. I would prefer to do it globally on a server. How to accomplish this?
3. On a second client which never had an old /etc/sysconfig/network-script configuration I am able to even disconnect the device as a user using nmcli. Why? I cannot see any relevant differences in the /etc/NetworkManager/system-connections/* files.
Thanks for clarifying.
Marek
I just migrated an old school configuration located in /etc/sysconfig/network-scripts to /etc/NetworkManager/system-connections on my Fedora 38 systems. I am confused of several things.
1. On a server when I run nmcli devices, I can see apart from others:
ppp0 ppp disconnected --
eno1 ethernet unavailable --
enp72xxx ethernet connected --
ppp0 is surely connected and working havin g ip address and communicating. Why is it reported as disconnected?
eno1 and enp72xxx were not configured in the old system why are they displayed as I can see? The enp72xxx interface is probably some ipmi related and having ip addres 169.254.3.1, eno1 is not having an ip address, it is not used.
2. How can I be sure any user is not able to shutdown any interface on the server by any means? When I use nmcli as a user, I correctly get I am unauthorized, but regarding same actions on the client I can see I am not able to shutdown an interface using nmcli, but I am able to shut it down using gdm. Best if I can disable this also on a client for a particular interface. I would prefer to do it globally on a server. How to accomplish this?
3. On a second client which never had an old /etc/sysconfig/network-script configuration I am able to even disconnect the device as a user using nmcli. Why? I cannot see any relevant differences in the /etc/NetworkManager/system-connections/* files.
Thanks for clarifying.
Marek